Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          sbopKK05Zbf06cGvLZitMRHtZkVmGt6TcTrkSb/7zEM=
Subject key identifier:   CA:D7:42:12:42:2E:E0:F5:1F:4F:21:74:75:CE:66:23:F3:28:30:B7
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       4AB9E00DD53064BB41DECFF611DB80F95794222F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          0299
Signing time:             Sat 23 Aug 2025 01:06:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 04:48:59 +0000
Files and hashes:         1: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: znuEQufFaRRqGI49Q2zq/fKx6+J2reZ1PZB+1Pd8btk=)
                          2: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: ipYqZy2Bw5WltHHZykTTJnZ3JhG9BblnpE6LKfOMyUY=)
                          3: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=)
                          4: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: 9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=)
                          5: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: 2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=)
                          6: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: LoNT6rAzouHElCAxQfq7lbXt6avk0AfPnw2zLK+lX6c=)
                          7: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: xZZjbro5zLk1oyGqVK7m76LBNIEgAirpjrwgFYj51So=)
                          8: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: 79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:e0:0d:d5:30:64:bb:41:de:cf:f6:11:db:80:f9:57:94:22:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Aug 23 01:01:59 2025 GMT
            Not After : Aug 24 04:48:59 2025 GMT
        Subject: CN=CAD74212422EE0F51F4F217475CE6623F32830B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:7e:ef:a8:11:d6:5d:59:57:11:9c:77:76:
                    a1:51:33:fe:d0:c7:99:5f:00:20:68:ee:3b:77:58:
                    e8:55:03:ff:88:55:1b:a2:51:e9:90:2b:2f:34:6c:
                    dd:4d:e6:5a:f0:7d:fd:32:c6:6d:c0:33:92:35:d2:
                    28:ff:97:09:43:a4:08:ba:8f:25:22:03:29:44:3f:
                    b0:a0:26:22:0e:04:73:76:87:46:e2:e9:6e:d5:bd:
                    f5:b8:09:12:e2:c2:ec:d4:25:e9:0a:e2:04:34:c2:
                    33:82:2f:76:61:0e:ab:96:c0:74:c7:f3:ec:96:a4:
                    1b:5c:c9:dd:e2:55:58:52:a7:3a:a6:03:3c:ff:43:
                    74:7a:e3:8a:05:29:70:01:29:08:be:a9:31:f6:04:
                    4a:0f:f6:43:77:17:9e:f6:f5:99:eb:57:15:4a:64:
                    34:8f:a2:84:07:e8:b9:05:04:85:74:b1:a8:4d:46:
                    54:ba:8c:e3:5f:7a:99:6f:89:81:d9:92:74:31:02:
                    fb:a5:32:ac:41:2b:ac:2e:b2:67:9d:03:2d:a0:85:
                    ed:2a:f5:21:29:2c:37:93:74:d3:ef:c6:22:5e:93:
                    10:27:7a:fc:7d:ed:3b:e7:dd:0a:a2:b6:9f:20:78:
                    01:a8:8b:08:1b:2c:ad:6e:3f:03:6a:d7:4a:f0:9e:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:42:12:42:2E:E0:F5:1F:4F:21:74:75:CE:66:23:F3:28:30:B7
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:f2:91:35:09:ae:d1:ac:95:6f:6d:f0:bc:59:00:8d:ec:
         5a:47:3c:c6:ab:08:29:56:f2:33:30:a4:30:41:b9:40:01:72:
         f2:00:c4:23:16:e2:51:cb:61:e8:d5:8b:7d:2a:2f:55:66:11:
         10:df:09:8a:a7:54:b7:22:64:b6:e3:96:ce:e7:cb:f3:1b:65:
         ae:d4:10:f2:b3:ad:3c:22:d3:d1:f0:5a:1a:3e:c5:7b:c6:b6:
         c3:1d:9a:ea:d7:d4:3b:d2:27:60:74:c2:6c:eb:40:85:b8:35:
         1f:b0:cf:e2:93:7e:d0:a3:60:76:c9:40:96:4e:1c:35:97:b4:
         52:07:49:a0:f5:ec:46:ea:37:3b:39:e4:b2:aa:7c:db:d5:74:
         b3:3c:c9:ef:ec:8a:a5:93:f6:60:19:96:9a:aa:7c:e8:c7:34:
         0e:c7:b6:01:24:e2:88:a9:41:f3:51:4e:68:46:64:25:84:c5:
         2b:ef:61:a2:2f:9e:d3:16:fa:1e:f8:4b:f3:76:2f:5c:a2:fb:
         7b:0d:d1:74:b8:f7:79:02:4c:51:b8:e9:23:a8:cc:80:18:9a:
         5a:d6:b1:78:5a:04:a4:e7:b3:c5:c4:dc:a1:cd:11:24:99:6e:
         c9:c4:49:e1:e0:2c:50:d6:32:df:07:61:9a:bf:a4:39:ab:d9:
         f9:b5:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:53 2025 by rpki-client